News for hackers. Stuff that matters.

A comment on Facebook Bots Are Not Stealing Your Ad Spend. Parent comment

Re:Facebook Bots Are Not Stealing Your Ad Spend by xentronium on Wednesday August 01, 2012 @04:59PM (#4325673)
If this worked like you think, bad things would happen. Think about all the "?action=delete" or "/logout" links spread all over the internet.
[ Parent | on HN ]
Re:Facebook Bots Are Not Stealing Your Ad Spend by vampirechicken on Wednesday August 01, 2012 @07:13PM (#4326286)
Bad things deserve to happen to web app operators who do not protect delete and logout by putting them behind POST[1] request.

[1] pedantry - PUT, POST, DELETE implement it however you want. Just don't change database state using GET.

[ Parent | on HN ]